Oracle Blog

Weblog without Memory

Monday May 31, 2010

Sometimes ACIs evaluation on large (static) groups can play a significant role in Directory Server performances, especially when there are applications that makes massive and frequent queries to evaluate group membership.

Directory Server (since 5.2patch3) has a nice feature to handle the behavior of these queries, since ACIs are generally small instructions, they are cached into the for a faster access... but to avoid having too much space

nsslapd-groupevalsizelimit

maximum number of
members in a group during acl evaluation ( there is a parameter for that
(forgot which one but I could search )